Privacy Notice

Last Updated: May 24th, 2018

At Theakou Sofia Techniki OE, we are committed to protecting and respecting your privacy. Please read this notice as it contains important information about how we use personal data that we collect from you or that you provide to us.

Information & Consent

This Privacy Notice describes how we collect, use, process, and disclose your information, including personal information about you (hereinafter, the “User”), in conjunction with your access to and use of our booking system.

By reading this Privacy Notice, the user is hereby informed on how we collect, process and protect personal data furnished through the booking engine.

The User must carefully read this Privacy Notice, which has been written clearly and simply, to facilitate its understanding, and to freely and voluntarily determine whether they wish to provide their personal data, or those of third parties, to Theakou Sofia Techniki OE.

When this notice mentions “booking system,” “booking engine,” “system,” “website,” “platform,” “app,” “webapp,” “services,” “online services,” it refers to all pages and functions under https://fteliablackvillas.reserve-online.net/ unless specified otherwise.

By accessing the platform or providing information, you agree to our privacy practices as set out in this privacy statement. We may change this notice from time to time. You should check this notice frequently to ensure you are aware of the most recent version.

Identity

When this notice mentions “we,” “us,” or “our,”, “data controller,”, “controller,”, it refers to Theakou Sofia Techniki OE.

Data Controller

Theakou Sofia Techniki OE operates this booking system through a data processor, as explained below. For the purposes of the General Data Protection Regulation (“GDPR”) (EU) 2016/679, we are the Data Controller. There is a strict contractual framework between the data controller and the data processor for the protection of your personal information. We are:

Ftelia Black Villas “Theakou Sofia Techniki OE”
Ftelia Beach
84600, Mykonos
GR

The User may contact our Data Protection Officer:

Data Protection Officer
theakosd@gmail.com

Data Processor

WebHotelier operates this booking system on behalf of Theakou Sofia Techniki OE and is committed to protecting the privacy of the users of this system. WebHotelier is:

WebHotelier Technologies Limited
Mnasiadou 9 (Demokritos Building, Office 16)
1065 Nicosia
Cyprus

For the purposes of the GDPR, where WebHotelier processes your personal data on behalf of Theakou Sofia Techniki OE, WebHotelier is the the Data Processor. When this notice mentions “data processor,” “processor,” “WebHotelier,” it refers to WebHotelier Technologies Limited.

WebHotelier is a certified PCI-DSS Level 2 Service Provider audited monthly by Trustwave.

The User may contact WebHotelier's Data Protection Officer:

Data Protection Officer
dpo@webhotelier.net

Obligatory nature of providing the data

The data requested in the forms accessible from the booking engine are, in general, mandatory (unless specified otherwise in the required field) to meet the stated purposes. Accordingly, if they are not provided or are not provided correctly, we will be unable to process the request.

Personal data we collect and process

This will include:

personal information about you which we ask you for (e.g. your name, address, and email address) when you make a booking from our booking engine;
financial details in order to process your booking when we require pre-payment;
details of transactions you carry out through our booking engine and details of the fulfilment of your orders.
our data processor may only collect and process personal data collected and/or processed on behalf of us in accordance with our instructions. WebHotelier cannot process it in any other way or for any other purpose.

We grant permission to our data processor:

to use your personal information for reserving rooms and/or other services for you at Theakou Sofia Techniki OE;
to pass on your financial details to Theakou Sofia Techniki OE and/or appropriate third party (for example, credit card company) for the purpose of confirming or paying for a booking;
to use your information for marketing purposes (where you explicitly agree to this); and
to pre-complete forms and other details on our website to make your next visit to our booking engine easier (e.g. when amending or cancelling a booking).

Social Login:

In the event of registration and/or access through a third-party account, we may collect and access certain information of the User’s profile from the corresponding social network, solely for internal administrative purposes and/or for the purposes indicated above.

Third-party data (e.g. book for a friend)

In the event that the User provides third-party data, they declare that they have the third party’s consent and undertake to provide the interested party -the data holder- with the information contained in this Privacy Notice, duly exonerating us and our data processor from any liability in this regard. However, we may carry out the necessary verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with the data protection regulations.

Sensitive Data

Unless specifically requested, we ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any Sensitive Personal Data (e.g., social security numbers, national identification number, data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, criminal background, trade union membership, or administrative or criminal proceedings and sanctions).

Use of Services by Minors

The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide Personal Data through the Services.

Purpose of processing personal data

Depending on the User’s requests, the personal data collected will be processed in accordance with the following purposes:

To manage the bookings made, including payment management (where applicable) and the management of the user’s requests and preferences.
To manage registration in loyalty or membership programs, as well as obtaining and redeeming points.
To manage the User’s contact requests with us through the channels provided to this end.
To manage the sending of personalised commercial communications from us, by electronic and/or conventional means, in cases in which the User expressly consents.
To manage the provision of the contracted accommodation service, as well as additional services.
To manage surveys and/or evaluations regarding the quality of the services provided by us and/or the perception of its image as a company.

Data Retention

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law or if the User requests their withdrawal from us, opposes or revokes their consent.

The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services or if you have a booking that has not yet been fulfilled)
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them)
Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation or regulatory investigations)

Legitimate interest for processing your data

The data processing required in fulfilment of the aforementioned purposes that require the User’s consent cannot be undertaken without said consent.

Likewise, in the event that the User withdraws their consent to any of the processing, this will not affect the legality of the processing carried out previously.

To revoke such consent, the User may contact us through the appropriate channels.

By the same token, in those cases in which it is necessary to process the User’s data for the fulfilment of a legal obligation or for the execution of the existing contractual relationship between us and the User, the processing would be legitimized as it is necessary for compliance with said purposes.

Data Disclosure

We will use and disclose Personal Data as we believe to be necessary or appropriate:

to comply with applicable law, including laws outside your country of residence;
to comply with legal process;
to respond to requests from public and government authorities, including authorities outside your country of residence and to meet national security or law enforcement requirements;
to enforce our terms and conditions;
to protect our operations;
to protect the rights, privacy, safety or property of our own, you or others; and
to allow us to pursue available remedies or limit the damages that we may sustain.

We may use and disclose Other Data for any purpose, except where we are not allowed to under applicable law. In some instances, we may combine Other Data with Personal Data (such as combining your name with your location). If we do, we will treat the combined data as Personal Data as long as it is combined.

International transfers of personal data

We may transfer your personal information to our data processor(s) or/and sub-processor(s) based outside of the EEA for the purposes described in this notice. If we do this, your personal information will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by regulators, or having our suppliers sign up to an independent privacy scheme approved by regulators (like the US ‘ Privacy Shield’ scheme).

Our data is stored in the cloud using Amazon Web Services in N. Virginia, USA and in Frankfurt, Germany. If you are accessing any of our systems from outside the USA, you acknowledge that your personal information may be transferred to the USA, a jurisdiction which may have different privacy and data security protections from those of your own jurisdiction, to be processed and stored.

User's Responsibility

The User:

Guarantees that they are of legal age or legally emancipated, where applicable, fully capable, and that the information furnished to us is true, accurate, complete and up-to-date. For these purposes, the User is responsible for the truthfulness of all the data communicated and will keep the information updated, so that said data reflects their actual situation.

Guarantees that he/she has informed third parties on whose behalf he/she has provided data, where applicable, of the aspects contained in this document. Also guarantees that he/she has obtained the third party’s authorisation to provide their data to us for the purposes indicated.

Will be responsible for false or inaccurate information provided through the Website and for damages, whether direct or indirect, that this may cause to us or third parties.

Exercise of Rights

The User may contact us at any time free of charge, to:

To obtain confirmation about whether or not personal data concerning the User are being processed by us.
To access their personal details.
To rectify any inaccurate or incomplete data.
To request the deletion of their personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
To confirm revocation of consent.
To obtain from us the limitation of data processing when any of the conditions provided in the data protection regulations are met.
To request the portability of your data.

Likewise, the user is informed that at any time he/she may file a complaint regarding the protection of their personal data before the competent Data Protection Authority.

Security Measures

We will process the User’s data at all times in an absolute confidential way and maintaining the mandatory duty to secrecy with regard to said data, in accordance with the provisions set out in applicable regulations, and to this end adopting the measures of a technical and organisational nature required to guarantee the security of their data and prevent them from being altered, lost, processed or accessed illegally, depending on the state of the technology, the nature of the stored data and the risks to which they are exposed.

PRIVACY POLICIES & PERSONAL DATA

The website www.fteliablackvillas.com, hereinafter referred to as “Website”, is managed by Theakou Sofia Techniki OE, having its registered office at Violetas 1, Gerakas, Athens (hereinafter referred to “Ftelia Black Villas”), that we collect from you during your visit on our Website, which means all of the information that were gathered and identify you as persons or can eventually identify you directly or indirectly.

“Ftelia Black Villas” deals with particular seriousness about the protection of your personal data and has taken all the necessary measures for preserving the security and confidentiality of the information concerning the visitors/users of the Website.

You are requested to carefully read the privacy policy and protection of personal data presented on our website, so you can be informed regarding the information that is being gathered from you, when you are visiting it, and when you are using the online services that are being posted, their use as well as your rights as a user.

The present policy serves as a position of information for the users concerning data, according to the articles 13-14 of the General Data Protection Regulation under the European Union law 679/2016. For any questions concerning the present privacy policy, and generally with the way “Ftelia Black Villas” collects and processes your personal data, please contact us at info@fteliabackvillas.com

INFORMATION OUR WEBSITE IS COLLECTING

Information that is being automatically collected during your visit and interaction with our website

Casually browsing on our website does not require from the online user the service/import of personal data. However, only the visit and browsing on the Website can collect automatically some information that can identify you directly or indirectly, such as:

Internet Protocol address (IP) from your computer

The type of program (browser) and operating system

The web pages you visited immediately before and after your visit on the page,

The speed of your connection and information about the software programs installed in your computer,

Basic connection information with your server and

Information that is being collected through HTLM cookies, Flash cookies, web beacons and other similar technologies (see below: in the Cookies section).

Information you provide to us directly:
2.1. Οn-line bookings

If the website user wishes to make a room reservation in one of our Hotels, it is required to fill in the required details upon submission of which the Site collects and processes your personal data upon consent, the following information:

Full name

Telephone number (optional)

Payment card details (name holder, card number, security code)

Booking dates and room types

Optionally, other personal information of the user, such as his full postal address, the reason of travel, and his comments/special instructions.

The introduction of this kind of information entered through the Web Hotel Reservation System on behalf of Ftelia Black Villas owns and the financial information that the user enters on the booking platform is completely secure and certified according to the PCI-DSS system. Prior to the completion of the reservation, the user is in any case required to accept the booking conditions and the privacy policy of the hotel where the reservation was made.

2.2. Sending informative material/newsletters

The user can also declare through our Web Site if he wishes to be sent informative material / newsletters by providing his email address to the Ftelia Black Villas contact list.

CONSENT

By using this Website and with the provisions of the law concerning consent for electronic communications for communication purposes and direct marketing, you expressly consent to all the above cases of processing and disclosure of your personal data. You are free to recall your consent anytime. If you seek to recall your consent, please let us know accordingly, by addressing your request to the address info@fteliablackvillas.com. The withdrawal of your consent does not invalidate the legitimacy of your personal data.

The information that is automatically collected from browsing on our Website, please be advised to abstain from visiting if you do not wish the collection and process of this kind of information.

THE PURPOSES OF USING THE INFORMATIONS WE COLLECT

To be able to provide our services

By making an online reservation through our Site, we use the information you provide to deliver you with the highest quality hospitality services at the hotel of your choice, according to your needs and preferences.

To contact us

With your consent, we use your contact information (email) in order to send you “Ftelia Black Villas”, newsletters of with our news and offers.

Concerning the statistical analysis

To learn more about how our website is used by our visitors, we keep it in a concise format and analyze the data we collect. We may use this information, for example, to track and analyze the use of the Site, to enhance its functionality and to better shape its content and design accordingly to the needs of our visitors.

MINORS

When collecting information directly from you, we take adequate care to determine which of the collected personal information concerns minors. In any case, if we find that we have collected any personal information from a minor without a verifiable parental consent in accordance to the Article 8 of the EU Data Protection Regulation 679/2016), we will delete the information from our database as soon as possible. If you think we may have collected information from a minor under the age of 16, please contact us at info@fteliablackvillas.com

USE AND EXCHANGE OF INFORMATION

«Ftelia Black Villas» respects your right to protect your privacy and your information and therefore uses this information for the purposes stated above. For this reason, it does not disclose, transmit or make your information accessible to third parties. We also do not transmit this information outside of the European Union.

We may make information about you available to other companies, applications, or persons in the circumstances listed below:

We may disclose to the third parties aggregated information or information that does not identify you directly, so that we can develop the content and services of our Website. Please note that we do not share your contact information in any way with third parties,

We may use or use in the future third parties to provide services related to our Website, such as database management, maintenance services, analytics, marketing, data processing, email and text distribution. These third parties will have access to your information only for the performance of the above tasks on our behalf and with explicit contractual commitments to protect your privacy and personal data.

We may disclose information about you if “telia Black Villas” is redeemed or merged with another company or a similar business transaction takes place. However, in this case, our Website will inform you by posting a distinct notice on it or by sending you relevant information to the email address you have provided, before your information is transferred and generally subjected to a different privacy policy.

We may disclose information about you in order to investigate, prevent or take action in concerning illegal activities you may be involved with, if there is suspicion of unlawful conduct or criminal offenses against the rights and legitimate interests of any natural or legal person in case of violation of the Terms of Use of the Website or if required by law, as well as in other cases where we believe in good faith that disclosure of the information is necessary.

We may disclose information about you to respond to court summons, investigative warrants, court proceedings, court orders, legal proceedings or other law enforcement measures by any competent authority, including the Data Protection Authority and the Data Protection Supervisors of others of the Member States of the European Union, as well as to guarantee and defend our legitimate rights or to refute claims against us.

Please note that third parties may independently collect data about you, including your IP address and information about the websites you visit and the links you click through, cookies, clicks on links or other media during your visit. For more information, refer to the “Cookies” unit.

TIME LIMIT FOR CONFIRMATION

«Ftelia Black Villas» will keep the personal data that has been collected through its Website for the time strictly necessary for the fulfillment of the above processing purposes. If you revoke your consent to the collection and processing of your personal data, we will delete your data from our electronic and physical records, unless compliance is necessary to comply with our legal obligation or to exercise foundation or defend rights or our legal interests before judicial authorities.

SAFETY OF INFORMATION

The security of your personal data is our ultimate commitment. In order to achieve this, we apply all the modern and appropriate means for the purpose of processing technical and organizational measures, the correspondence and sufficiency that is being checked regularly.

YOUR RIGHTS

You can exercise the following rights, as appropriate:

The right of access, to find out what kind of data we process, for which purpose and to whom,

The right of rectification, to correct any deficiencies or inaccuracies of your data,

The right to delete (deletion) in order to delete your personal data from our records, however, if processing is no longer necessary or your data it is not required to from us to comply with our legal obligations or for Defending our legal interests before the Courts,

The right to limit the processing, in case of questioning the accuracy of your data

The portability right to get your data in a structured and commonly used format

The right to object if you do not wish to use your data for the purposes of direct marketing of our services. “AKS Hotels” does not establishes profiles based on the personal data you provide through this Site.

To exercise your legal rights, please send a corresponding request to our e-mail info@fteliablackvillas.com.

«telia Black Villas» will make every effort to respond to all of your requests within thirty days of reception. However, if due to the complexity of your request or because of the amount of information it is not possible to meet your request within thirty days, «Ftelia Black Villas» is committed to inform you within the above deadline in writing concerning the reasons for the delay and to make every effort to satisfy your request as soon as possible and in any case within two additional months.

«Ftelia Black Villas» reserves the right not to file your claim if it is clearly unfounded or excessive, informing you of the reasons for not being able to file it.

In any case, you have the right to file a complaint with the Personal Data Protection Authority (www.dpa.gr).

What are cookies and why do we use them?

Cookies are small pieces of information stored on computers to identify the browser used while browsing the sites. Device IDs are compiled from the available system components, which may include IP addresses, user agent information (browser version, operating system type and version), , or device-generated identifiers, such as Apple’s advertiser identifiers, Apple vendor IDs, Google Android identifiers, or Google Play Store ad IDs. Cookies and similar technologies can be used to memorize items such as user IDs and preferences.

Using cookies makes it easy for our Web sites to store information about your visit by collecting useful information about your search preferences. So the search experience will be improved the next time you visit us.

In addition, cookies help us to see the performance and traffic of our Website, improving its presentation and content, according to our visitors’ preferences.

Which cookies are we using?

Some or all of the cookies described below may be stored in the browser. You can view and manage cookies in the browser (however, mobile browsers may not offer this option). Our site may use the following cookies:

The strictly necessary:

The technically necessary cookies are essential for the proper operation of our Web site, and they allow you to browse and use its functions. These cookies do not recognize your individual identity.

Without those cookies, we cannot provide effective operation of our Website.

In addition, these cookies allow our Website to remember your options such as a font size to provide enhanced and personalized features.

Performance cookies

Google analytics:
Those cookies collect information about how you use our Website, for example, which pages you visit more often. These cookies collect aggregate and anonymous information that do not identify any visitor. They are used solely to improve the performance of a website.

Google AdWords:
Our website supports remarketing services to advertise the company on third-party sites.

The Google AdWords remarketing service is provided by Google Inc.

Google also recommends installing the Google Analytics Exclusion Browser add-on -, https://tools.google.com/dlpage/gaoptout – for your web browser. The Google Analytics Exclusive Browser add-on provides visitors with the ability to prevent the collection and use of their data by Google Analytics.

For more information about Google’s privacy practices, please visit the Google web site at http://www.google.com/intl/en/policies/privacy/

Search Console:
These cookies collect aggregated anonymous information about the proper functioning and the existence of errors on our Website, such as if a user is looking for an older version of it or if some files have been violated.

Do not wish to use cookies anymore?
You can enable, disable or even completely delete cookies through the setup options in your browser.

For example, in Chrome, you can click on the Chrome menu and then select Settings / Privacy / Content Settings and change the cookies settings to suit your preferences.

If you choose to disable cookies, some parts of the site may not work properly.

More information on the types of cookies is available at http://www.allaboutcookies.org. If you wish to learn how to check or remove cookies, you can visit www.AboutCookies.org.

CONTACT
If you have any questions regarding our Policy or generally, regarding the activities of “Ftelia Black Villas”, you can contact us at info@fteliablackvillas.com.

CHANGES IN THE PRESENT POLICY
«Ftelia Black Villas» reserves the right to modify this present Policy, always in accordance with the applicable privacy and privacy laws. Visitors of our Site should periodically review this Privacy Policy to be informed of any change that takes place, while «Ftelia Black Villas» is committed to make the necessary updates to its visitors and users with any appropriate means, in compliance with the conditions that are set by the EU 679/2016 General Data Protection Regulation.